Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/9c9f28-4f41-472d-a63e-a10a3a4963fb/1/QNVZGnW9aT6dO3ZoNL8HT3se7jo.mft
File: QNVZGnW9aT6dO3ZoNL8HT3se7jo.mft (raw, json)
Hash identifier: TwHuqjULzZ8AZiLrbLYce0s41GaTWiTUqC5TfBLxfao=
Subject key identifier: 3F:17:42:90:FF:24:CA:D4:C5:4D:46:D2:58:3B:99:35:DD:2C:F8:CA
Authority key identifier: 40:D5:59:1A:75:BD:69:3E:9D:3B:76:68:34:BF:07:4F:7B:1E:EE:3A
Certificate issuer: /CN=40d5591a75bd693e9d3b766834bf074f7b1eee3a
Certificate serial: 019EB6FC3D86FE9CB029D709C0DA6163E56E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNVZGnW9aT6dO3ZoNL8HT3se7jo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/9c9f28-4f41-472d-a63e-a10a3a4963fb/1/QNVZGnW9aT6dO3ZoNL8HT3se7jo.mft
Manifest number: 0D63
Signing time: Thu 11 Jun 2026 14:00:44 +0000
Manifest this update: Thu 11 Jun 2026 14:00:44 +0000
Manifest next update: Fri 12 Jun 2026 14:00:44 +0000
Files and hashes: 1: QNVZGnW9aT6dO3ZoNL8HT3se7jo.crl (hash: eNBKMimhShnIpRjt3sOuwqHFXqyBJiMGCm7l4s/shok=)
2: YVo8LjxK7TZOHy2e0UtRMc12yMo.roa (hash: y1sW6xShCe5Zkqn/itmgk+RBNdntx91KOyuie9DOHaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/9c9f28-4f41-472d-a63e-a10a3a4963fb/1/QNVZGnW9aT6dO3ZoNL8HT3se7jo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/9c9f28-4f41-472d-a63e-a10a3a4963fb/1/QNVZGnW9aT6dO3ZoNL8HT3se7jo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QNVZGnW9aT6dO3ZoNL8HT3se7jo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:fc:3d:86:fe:9c:b0:29:d7:09:c0:da:61:63:e5:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40d5591a75bd693e9d3b766834bf074f7b1eee3a
Validity
Not Before: Jun 11 14:00:44 2026 GMT
Not After : Jun 12 14:00:44 2026 GMT
Subject: CN=3f174290ff24cad4c54d46d2583b9935dd2cf8ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e2:94:3e:97:d0:04:20:65:7c:96:b4:3e:e1:
e1:4b:78:46:90:fd:a8:75:31:dc:03:d7:45:fb:03:
20:ac:b6:7a:21:47:7f:ea:bf:32:de:30:f7:33:1e:
1b:29:13:60:54:ab:98:97:02:00:25:02:84:2d:a0:
2e:a2:c9:d8:b8:7c:ff:8b:a5:a1:27:51:9a:5e:79:
4d:4c:b2:be:a0:20:ff:80:64:65:d3:3a:57:a4:36:
cb:8f:22:bd:a8:f0:26:b9:59:b0:c4:86:51:2e:4b:
d7:e0:55:0e:77:8b:85:9a:c2:40:f0:c0:ee:76:87:
08:c8:50:38:fc:f8:43:0e:34:ca:7f:a6:0d:1e:c2:
05:05:b0:2e:11:0d:57:f1:ec:0e:7e:bc:77:58:a4:
e7:c9:90:eb:70:93:39:84:57:e5:63:a2:58:ac:76:
f9:95:c4:be:54:a2:f7:30:04:49:6b:4f:50:3e:a3:
2d:d2:19:e0:cf:c0:54:b1:47:75:2c:cd:3d:18:74:
0c:12:e2:a8:94:c2:db:09:62:a3:46:77:36:77:30:
f5:3b:0a:34:98:47:d3:eb:8d:30:ac:bc:95:60:93:
b6:0f:75:fa:61:66:3f:7c:00:c7:23:94:e2:4e:6c:
fa:d1:ea:da:c9:b3:d3:85:b7:8c:bb:a7:54:5e:c3:
d9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:17:42:90:FF:24:CA:D4:C5:4D:46:D2:58:3B:99:35:DD:2C:F8:CA
X509v3 Authority Key Identifier:
keyid:40:D5:59:1A:75:BD:69:3E:9D:3B:76:68:34:BF:07:4F:7B:1E:EE:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNVZGnW9aT6dO3ZoNL8HT3se7jo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9c9f28-4f41-472d-a63e-a10a3a4963fb/1/QNVZGnW9aT6dO3ZoNL8HT3se7jo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9c9f28-4f41-472d-a63e-a10a3a4963fb/1/QNVZGnW9aT6dO3ZoNL8HT3se7jo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:d4:51:d9:b0:e2:6c:58:32:d6:6c:ae:dd:3c:cf:01:21:d3:
5d:df:c1:d1:5b:c0:99:85:92:df:35:8d:ea:a8:ae:6b:d9:73:
40:0a:47:fb:b8:6b:5b:bc:a6:ad:6b:f0:42:9a:39:aa:60:76:
7c:e9:06:05:88:5c:5f:5b:e7:c5:04:ba:53:25:1a:ec:99:bb:
af:52:41:4d:9f:f1:13:a8:f7:87:42:43:75:be:96:6b:06:07:
5b:d0:00:35:1b:c3:c3:72:73:2f:99:2e:01:ee:1b:43:ca:aa:
5e:ac:42:c0:8d:e5:80:00:88:00:f6:c7:93:50:dd:e6:34:6b:
14:65:54:8b:83:30:46:82:44:b2:0f:6a:c9:a1:b7:7f:82:64:
0c:cb:74:68:5d:6e:05:33:9f:1e:ab:3d:58:29:ab:ec:07:32:
15:a4:d9:f2:1b:8b:66:20:1a:37:62:8e:97:b2:6b:0f:97:1e:
c8:fb:ad:81:90:98:4a:f5:ab:24:f9:77:08:fe:0d:c3:bc:0f:
47:61:47:7b:43:9c:76:8e:07:2d:a8:37:e2:49:5e:93:45:4c:
1c:b5:09:85:22:35:e8:44:fe:15:98:03:ed:8b:51:49:28:40:
bd:c7:f1:7e:d5:ee:1f:e0:ad:94:03:2d:3f:19:40:a6:e6:65:
39:8c:34:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:23:40 2026 by rpki-client